Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/ZwxGJdMulFAazkCZYzMfw1ZhhO0.roa
File: ZwxGJdMulFAazkCZYzMfw1ZhhO0.roa (raw, json)
Hash identifier: uNDGsF57fkhWi34QLB+Hsm4JycFqWcoDdiCxyjmmEAk=
Subject key identifier: 67:0C:46:25:D3:2E:94:50:1A:CE:40:99:63:33:1F:C3:56:61:84:ED
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 01856D386466F1437A5E5F153FC7A9C96799
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/ZwxGJdMulFAazkCZYzMfw1ZhhO0.roa
Signing time: Sun 01 Jan 2023 12:04:50 +0000
ROA not before: Sun 01 Jan 2023 12:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205192
IP address blocks: 185.226.161.0/24 maxlen: 24
185.226.160.0/24 maxlen: 24
185.226.163.0/24 maxlen: 24
185.226.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:64:66:f1:43:7a:5e:5f:15:3f:c7:a9:c9:67:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jan 1 12:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=670c4625d32e94501ace409963331fc3566184ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:a7:38:9f:99:75:e9:fa:ae:b0:9b:88:ec:
29:06:bb:e7:ca:3f:3f:7e:1c:7d:05:95:18:74:77:
6a:41:9c:26:9b:81:75:7a:35:5b:e6:8a:bb:bc:24:
74:88:b6:01:1d:16:2c:af:a0:a6:bc:c0:5e:08:bd:
0c:ea:45:18:8d:16:4c:b6:7d:49:00:e8:b0:d9:ff:
d7:00:0d:2f:55:ad:90:f6:4b:58:98:24:c4:43:ce:
db:11:c3:33:17:33:83:0a:f3:86:59:bf:d7:bb:ea:
28:05:8a:99:72:0e:b0:85:85:44:ee:7e:02:95:ac:
03:25:15:ef:bd:8f:68:f3:4f:e1:26:e6:b7:f0:a7:
77:b9:d0:68:b4:81:08:d5:01:6c:67:51:c0:80:a1:
f0:17:94:4e:05:74:9a:ea:c4:42:17:6c:4c:47:66:
ed:bc:f0:11:87:55:66:84:35:8a:f9:b1:54:20:72:
d5:a5:1d:1b:4a:07:8c:eb:f7:94:12:60:6b:d0:d0:
df:6d:6a:a9:86:67:48:62:ee:3a:8e:05:d5:02:e9:
94:69:1d:6a:bd:d0:a8:12:5e:ea:b3:0b:f6:c2:9c:
26:29:07:8f:41:6e:18:76:d8:f2:3a:13:bc:39:3d:
8f:00:8d:67:5e:9c:2b:b9:7a:aa:b5:ee:47:73:07:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:46:25:D3:2E:94:50:1A:CE:40:99:63:33:1F:C3:56:61:84:ED
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/ZwxGJdMulFAazkCZYzMfw1ZhhO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:7f:3d:10:b8:8d:bd:f6:f6:a6:54:f8:2c:e4:74:6d:8e:b8:
52:99:58:55:2b:3c:ce:de:ac:f0:37:e0:d1:59:b7:4e:6a:b2:
53:d8:eb:0c:55:d6:d8:fa:d0:19:18:3d:34:29:84:3a:9c:1a:
b4:d6:4d:ae:f0:48:a1:99:b0:c8:c7:59:38:45:a0:27:55:7f:
9a:8d:20:53:b1:11:e3:67:42:cc:93:65:b8:f8:e4:8c:6e:b9:
7e:c1:62:f1:a3:4f:87:cd:84:c9:97:58:6f:99:57:82:8a:3e:
78:1e:86:19:3a:d1:f0:52:72:cf:94:5d:c2:5a:7c:0b:20:45:
aa:ff:ee:66:c7:ea:17:a3:68:a5:00:c9:50:a7:96:0b:ef:1c:
62:82:1d:27:91:0a:f9:e7:eb:d0:8f:1a:bc:21:6e:75:e4:14:
e8:d8:df:4d:c7:00:13:c9:31:7c:40:56:a6:c8:7b:d5:7b:70:
4b:28:57:d0:b6:e5:2c:bd:b9:07:de:4d:b0:4c:ee:e5:a9:c5:
30:41:7e:e4:68:0e:fc:a6:79:ae:a0:16:90:db:bb:99:99:7f:
41:61:a2:24:c5:5e:a1:8a:6c:56:a6:c6:fc:6e:6f:66:ef:c8:
3f:03:db:9f:e4:f8:7b:c4:dc:95:8f:82:ff:70:d3:32:06:fb:
25:21:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:08 2024 by rpki-client on console-ams.rpki-client.org